Technology Overview
Client Deployment
To ensure seamless onboarding our clients can access At School Today™’s systems via our web portal or one of our mobile applications. This ensures minimal efforts are required by our client’s internal IT support to function. If you can access our secure web portal and have downloaded one of our mobile applications, then you are ready to signup and begin onboarding your school.
Web Portal https://app.atschooltoday.net/login
Apple iOS https://www.atschooltoday.net/download/ios.php
Android https://www.atschooltoday.net/download/android.php
Accessibility and Integration
Our services are encapsulated within our RESTful API. Any endpoint that supports REST can integrate with At School Today’s API with minimal effort. Our API includes approval, payment and confirmation functionality, in addition to a whole host of data sharing and content delivery services. Currently, this API is accessible via our own website and mobile applications.
Application Security
Our API manages security via tokens, all calls to the API are validated for a token before running any business logic. Any requests with missing or incorrect tokens are detected and an error is reported to the user. In addition, special logic has been implemented to ensure user level data is segregated and no cross contamination of data can happen across multiple user requests. This occurs at the user id and token level, ensuring the incoming user id matches the returned dataset.
A token is generated when a user logs in. The web and mobile applications are unable to decrypt the tokens that are returned and only store them in the application cache for the interaction with the API.
The applications connect to the API via an SSL certification which ensures all communication with the API is encrypted in transit. User passwords are encrypted in the database which adds another layer of security.
Data Encryption
At School Today’s cloud deployed infrastructure encrypts user data at rest and within the database. Our use of SSL certificates ensures data in transit between our web portal/mobile application(s) and our back-end infrastructure is encrypted too, providing extra security for our clients.
